add exec rights